Changed X-frame-options to AllowAll for iframe compatibility